#VU41777 Improper Authentication in CubeCart - CVE-2014-2341

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU41777

#VU41777 Improper Authentication in CubeCart - CVE-2014-2341

Published: April 22, 2014 / Updated: August 11, 2020


Vulnerability identifier: #VU41777
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/U:Green
CVE-ID: CVE-2014-2341
CWE-ID: CWE-287
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vulnerable software:
CubeCart
Software vendor:
CubeCart

Description

The vulnerability allows a remote non-authenticated attacker to read and manipulate data.

Session fixation vulnerability in CubeCart before 5.2.9 allows remote attackers to hijack web sessions via the PHPSESSID parameter.


Remediation

Install update from vendor's website.

External links